Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
File: TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft (raw, json)
Hash identifier: wlRo1RZt0GpDwR89aulViBsQTSygomdUhUrV0IqWz7c=
Subject key identifier: 35:8F:06:A8:BE:4E:35:C0:48:6E:0D:FF:D6:FA:5D:32:9E:5D:5B:B1
Authority key identifier: 4D:86:2E:65:E9:3D:88:5C:4F:97:44:9B:CA:EB:AB:C3:51:DE:67:D2
Certificate issuer: /CN=4d862e65e93d885c4f97449bcaebabc351de67d2
Certificate serial: 019D39AE67B701891C79D3E356B67EAB8A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
Manifest number: CF
Signing time: Sun 29 Mar 2026 13:00:24 +0000
Manifest this update: Sun 29 Mar 2026 13:00:24 +0000
Manifest next update: Mon 30 Mar 2026 13:00:24 +0000
Files and hashes: 1: F3i7pvlCaVlLH03PBuARZVEC6Dw.asa (hash: FtQAM/wOBZf+OkMWx2MgLRzyqtUbtvx1ifNIr7aVQfc=)
2: TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl (hash: rbG/7p5fFxdpDVsItI8ct+b5Qb+luHCdyO/QoAzT+hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:67:b7:01:89:1c:79:d3:e3:56:b6:7e:ab:8a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d862e65e93d885c4f97449bcaebabc351de67d2
Validity
Not Before: Mar 29 13:00:24 2026 GMT
Not After : Mar 30 13:00:24 2026 GMT
Subject: CN=358f06a8be4e35c0486e0dffd6fa5d329e5d5bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6e:d5:b3:e5:19:4a:e5:35:41:7c:bf:dd:f5:
1d:2a:18:47:7c:9d:4d:3e:7a:8b:72:2e:39:64:a4:
e5:f0:1b:a2:92:6a:d5:1a:20:42:26:64:99:8a:02:
34:82:16:57:95:97:2a:8e:fd:cb:c2:40:de:ee:20:
2f:09:d5:fb:58:d5:bb:60:a5:9c:3c:2d:9d:61:ee:
50:cc:d9:43:76:6e:12:43:90:8d:2b:e1:ed:21:1f:
aa:a7:ea:da:af:1c:ac:ca:0e:d9:bc:01:28:19:20:
81:82:bd:4f:22:e8:6a:54:6f:b6:f9:42:ba:01:62:
3d:41:63:f8:ce:9a:05:a0:6b:c1:24:20:06:f6:68:
00:ef:d0:0e:2d:63:5c:95:b0:21:67:09:a6:ef:4a:
6e:63:4a:e5:de:25:03:0e:0d:08:20:fd:20:60:31:
84:e5:49:1b:b1:f9:3a:23:7d:34:02:09:27:04:00:
0e:96:a1:8c:c6:d8:8e:24:36:58:3f:d2:0c:5b:bc:
86:e0:94:ab:ae:36:6b:54:49:c4:4b:ec:1e:18:c5:
9c:e6:48:e3:64:92:03:cc:fa:54:a5:48:80:95:0b:
78:39:e6:83:67:6c:7f:cd:69:d2:c0:78:f9:63:42:
ab:71:f3:97:b9:9c:c3:80:25:e1:02:8c:d7:4c:c0:
5c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8F:06:A8:BE:4E:35:C0:48:6E:0D:FF:D6:FA:5D:32:9E:5D:5B:B1
X509v3 Authority Key Identifier:
keyid:4D:86:2E:65:E9:3D:88:5C:4F:97:44:9B:CA:EB:AB:C3:51:DE:67:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYYuZek9iFxPl0Sbyuurw1HeZ9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/9b1ed3-fecd-4de6-bc1a-8838a82829f9/1/TYYuZek9iFxPl0Sbyuurw1HeZ9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:0a:a7:14:4f:3b:e2:3f:75:23:47:72:a8:6f:b3:ec:ad:47:
92:ae:b5:08:ca:10:0b:35:21:46:95:3f:2c:be:76:5e:42:62:
e8:12:c4:d3:e8:f4:95:b8:51:d5:fb:ac:57:32:42:89:cd:d5:
aa:c1:62:00:55:f3:39:9b:7a:5c:c5:0d:ce:8b:a9:af:fd:ad:
68:ea:62:d5:fe:e9:4e:d8:ae:b3:a3:3c:ac:31:eb:12:b3:3b:
4c:f4:fa:57:d0:25:53:6f:38:d9:9a:88:8f:b1:77:30:f2:13:
01:74:0b:57:2e:6e:ef:07:9e:df:89:f2:4e:29:9a:c5:f3:21:
c2:67:3a:1d:e4:5c:39:d0:f6:20:6e:2a:d3:0e:df:0b:aa:b8:
cf:eb:aa:5f:5c:3b:36:61:9a:5e:3d:73:5d:b6:d0:01:55:48:
6d:80:bc:50:e7:22:2d:3d:7c:e0:eb:8a:2e:57:c8:65:bf:9c:
1f:1d:73:9f:79:b4:92:b9:ae:f0:8b:7e:c0:90:ed:72:0e:78:
1d:86:e8:59:db:97:ca:72:fc:e9:f9:29:fe:80:6d:a7:58:51:
a8:95:a5:ed:77:4d:ca:d5:b0:f8:ff:a1:94:49:1b:11:92:3e:
83:7c:e9:10:0a:dd:67:56:ce:fa:1a:be:79:f8:32:6d:c3:8d:
30:b5:e5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:44 2026 by rpki-client